Pause before clicking.
It's the smallest habit on this list, and the one that prevents the most damage. A two-second pause is the difference between a normal Tuesday and a phone call you really don't want to make.
Hi,
You have a new document waiting for your signature. Please review and sign before end of day to avoid delays.
REVIEW & SIGN
Looks normal. Sender domain isn't quite right. Pressure to act before EOD.
Most phishing emails fail one quick scan. The trick is doing the scan.
You don't need to be a security expert. You just need to slow down enough to ask three questions: who is this from, what are they asking me to do, and would I normally click this without thinking?
Signs to pause on
- The sender's name looks right but the email address doesn't (hover, don't click)
- Generic greeting — "Dear customer", "Hi there" — when they should know your name
- The link's display text says one thing but the actual URL goes somewhere else
- It arrived at an unusual time, like late on a Friday or just before a bank holiday
- Asks you to log in, "verify", or "confirm" something you didn't request
- Looks like a recognised brand (Microsoft, DocuSign, HMRC, Royal Mail) but the styling is slightly off
What to do instead
- Hover over links to see where they really go — without clicking
- Check the full sender email, not just the display name
- Open a new tab and go to the website directly, rather than clicking
- If it looks like a colleague, message them another way to confirm
- When in doubt, forward it to your IT team and let them check
- Trust your gut — if something feels off, it usually is
Modern attacks are designed to outrun your judgement.
Phishing kits are mass-produced. They're written to look ordinary, arrive at busy moments, and disappear into a normal day. The only thing they really need from you is speed. Take that away — even by two seconds — and most of them simply stop working.
Continue with the next seatbelts
Book a free 15-minute cyber chat.
No sales pitch, no jargon. We'll walk through your current setup and the easy wins, and answer anything you've been quietly wondering about. Think of it as a digital MOT.